PT-2022-1667 · Microsoft · Windows+4

Jinquan + 2 · Published 2022-02-08 · Updated 2025-10-24 · CVE-2022-21971

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version windows10 windows 11 win srv 19 win srv 22

Description The issue is related to incorrect code generation management in the Windows Runtime component of the Windows operating system. This allows a remote attacker to execute arbitrary code. There is a proof of concept exploit available.

Recommendations For Microsoft Windows versions prior to the fixed version, apply the necessary patch to resolve the issue. For windows10, update to a version that includes the fix for this issue. For windows 11, apply the relevant security update. For win srv 19 and win srv 22, install the available patch to mitigate the risk of exploitation.

Exploit

Fix

RCE

Access of Uninitialized Pointer

Code Injection

Weakness Enumeration

CWE-824

CWE-94

Related Identifiers

BDU:2022-00917

CVE-2022-21971

Affected Products

Windows

Windows 10

Windows 11

Windows Server 2019

Windows Server 2022

References · 35

• 🔥 https://github.com/0vercl0k/CVE-2022-21971 · Exploit
• 🔥 https://github.com/Malwareman007/CVE-2022-21971 · Exploit
• https://osv.dev/vulnerability/CVE-2022-21971 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21971 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21971 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-21971 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00917 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/674887 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971 · Vendor Advisory
• https://t.me/cvenotify/53282 · Telegram Post
• https://t.me/proxy_bar/668 · Telegram Post
• https://t.me/echeloneyes/593 · Telegram Post
• https://t.me/poxek/1912 · Telegram Post
• https://t.me/poxek/1378 · Telegram Post
• https://t.me/cvenotify/109087 · Telegram Post